cbcvebase.
CVE-2025-54905
published 2025-09-09

CVE-2025-54905: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

high7.1CVSS 3.1
AVLACLPRNUIRSUCHINAH
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftmicrosoft_365_apps_for_enterprise>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_2019>= 19.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2021>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2024>= 16.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_for_mac_2021>= 16.0.1 < 16.101.2509131416.101.25091314
microsoftmicrosoft_office_ltsc_for_mac_2024>= 16.0.0 < 16.101.2509131416.101.25091314
microsoftmicrosoft_sharepoint_enterprise_server_2016>= 16.0.0 < 16.0.5517.100016.0.5517.1000
microsoftmicrosoft_sharepoint_server_2019>= 16.0.0 < 16.0.10417.2004716.0.10417.20047
microsoftmicrosoft_word_2016>= 16.0.1 < 16.0.5517.100016.0.5517.1000
microsoftoffice
microsoftoffice_long_term_servicing_channel
microsoftoffice_long_term_servicing_channel
microsoftsharepoint_enterprise_server
microsoftsharepoint_server
microsoftword
msrcmicrosoft_365_apps_for_enterprise_for_32-bit_systems
msrcmicrosoft_365_apps_for_enterprise_for_64-bit_systems
msrcmicrosoft_office_2019_for_32-bit_editions
msrcmicrosoft_office_2019_for_64-bit_editions
msrcmicrosoft_office_ltsc_2021_for_32-bit_editions
msrcmicrosoft_office_ltsc_2021_for_64-bit_editions
msrcmicrosoft_office_ltsc_2024_for_32-bit_editions
msrcmicrosoft_office_ltsc_2024_for_64-bit_editions
msrcmicrosoft_office_ltsc_for_mac_2021
msrcmicrosoft_office_ltsc_for_mac_2024